My attempts to create a reproducible best practice low cost security architecture in aws with terraform. Theres obviously more that can be done with further paid subscription models (such as AWS Shield Advanced) but generally people do not have that much to spend per month (3k/mo) so we will do our best with keeping it as free as possible.

Features (So Far):
1). 3 Tier VPC (Web,App,DB) with SG/NACL hardening.
2). Use of CIS L1 Linux Images (Host Hardening).
3). Encryption everywhere (in transit, at rest).
4). Implementation of WAF on all ALBs.
5). DNS Hardening (SPF,DMARC).
6). Logging.
7). More on the way...